Known vulnerabilities in Openstack Nova

Vendor: Openstack
Software CPE: cpe:2.3:a:openstack:openstack_nova:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Openstack Nova Openstack Nova is affected by 11 known vulnerabilities: 3 medium, 8 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134849 - Improper input validation
CVE-2026-46448
CWE-20 Low
No
No
31.3.1, 32.2.1, 33.0.2 18.06.2026 SB2026061836
#VU122995 - Allocation of Resources Without Limits or Throttling
CVE-2026-24708
CWE-770 Low
No
No
30.2.2, 31.2.1, 32.1.1 17.02.2026 SB2026021762
SB2026021847
SB2026022004
and 1 more
#VU96470 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40767
CWE-200 Low
No
No
27.5.0, 28.3.0, 29.2.0 23.08.2024 SB2024082303
SB2024082309
SB2024082310
and 2 more
#VU96373 - Exposure of sensitive information to an unauthorized actor
CVE-2024-32498
CWE-200 Low
No
No
27.4.0, 28.2.0, 29.1.0 21.08.2024 SB20240821106
SB20240821107
SB20240821108
and 8 more
#VU76039 - Permissions, Privileges, and Access Controls
CVE-2023-2088
CWE-264 Low
No
No
- 11.05.2023 SB2023051132
SB2023051142
SB2023051143
and 7 more
#VU75530 - State Issues
CVE-2022-37394
CWE-371 Low
No
No
23.2.2, 24.2.0, 25.1.0 26.04.2023 SB2023042649
SB2023042650
#VU71714 - External Control of File Name or Path
CVE-2022-47951
CWE-73 Medium
No
No
24.2.0, 25.1.0, 26.1.0 31.01.2023 SB2023013129
SB2023013130
SB2023013131
and 15 more
#VU55331 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3654
CWE-601 Medium
No
No
23.0.2 27.07.2021 SB2021072712
SB2022032437
SB2022032440
and 2 more
#VU20338 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14433
CWE-200 Low
No
No
17.0.12, 18.2.2, 19.0.2 20.08.2019 SB2019082002
SB2019082003
SB2019090418
and 2 more
#VU10864 - Improper input validation
CVE-2017-18191
CWE-20 Low
No
No
- 07.03.2018 SB2017122107
SB2018100209
SB2018091705
#VU6848 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7214
CWE-200 Medium
No
No
- 31.05.2017 SB2017053119
SB2017053120
SB2017062823
and 2 more